email of course, not only is it uniquely identifiable but you have a way to verify and contact the user